The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The troubleshooting section in SKILL.md contains an instruction to execute sudo pacman -S yq. Using sudo to invoke the system package manager grants the agent elevated privileges, which is a high-severity security risk.
[REMOTE_CODE_EXECUTION]: The command omarchy-theme-install <git-url> in SKILL.md enables the downloading and installation of theme configurations from arbitrary remote git repositories. Since these themes can include executable configurations like Neovim Lua scripts, this represents a potential remote code execution vector.
[COMMAND_EXECUTION]: The skill documents multiple shell commands for managing local theme files and directories, such as mkdir -p ~/.config/omarchy/themes/my-theme/backgrounds and omarchy-theme-remove. These commands allow the agent to perform broad filesystem modifications within the user's home directory.
[INDIRECT_PROMPT_INJECTION]: The file skill-report.json contains self-referential safety claims such as "risk_level": "safe" and "verdict": "safe". These entries are designed to influence automated security evaluation. Evidence Chain: 1. Ingestion points: skill-report.json and git URL parameters. 2. Boundary markers: Absent. 3. Capability inventory: Filesystem writes, privilege escalation, and remote repository installation. 4. Sanitization: Absent.

omarchy-theming